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METHOD FOR TRANSMITTING ELECTRONIC DATA VIA TWO 
DIFFERENT NETWORKS IN ORDER TO INCREASE INTERNET 
SECURITY 

5 The present invention relates to a method, based on 
patent claim 1, which drastically reduces the known 
rates of hacker attacks on computer systems today. 
There are numerous devices for the security of computer 
systems, but they do not fulfill their purpose. They 
10 require vast amounts of resources, and despite this 
computer hackers cause 600 - 800 billion USD (American 
dollars) of damage annually worldwide. 

The central element in communication among computer 
15 systems is the packet. The data are split serially into 
packets. This means that the first X bits are defined 
as packet 1, the second X bits are defined as packet 2 
etc . These packets are then sent from the sender to the 
receiver in a network (e.g. on the internet). Apart 

2 0 from data, the packets contain addresses and rules 

regarding how they need to be assembled again at the 
receiver. Even if partial encryption is used, 
everything can be found at the same location, at the 
same time (in the same time window) , in one packet and 
25 in the same network. For this very reason, the data in 
such packets in a network are susceptible to 
unauthorized access. These facts are actually what make 
it possible for hackers to "tap" lines and read 
confidential data or penetrate other computer systems. 

3 0 "Lines" are also to be understood to mean wireless 

communication channels. 

All the security devices used (encryption, various 
algorithms, signature, firewall, virtual networks, 
Secure Sockets Layer) change nothing about the facts 
35 presented above, however, and are therefore also not 
able to take satisfactory care of the security of the 
computer systems involved. 
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It is the object of the 
drawbacks. This object is 
patent claim 1. 



invention to eliminate these 
achieved by the features of 



5 The physical (geographical) and spectral separation of 
the data during the time-shifted transmission in two 
networks give unauthorized access to the actual data 
next to no chance. 

10 The quintessence of the method is the physical 
(geographical) and spectral separation of the data and 
a small time shift in the transmission in two networks 
(dual network) , figure 1, so that the separate data are 
already implicitly encrypted - by a new method of 

15 packet preprocessing, table 1. 
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*) O packet = odd bits, E packet = even bits, 
N = number, packet lengths are examples 



This new method of preprocessing the data into 0 
packets and into E packets produces two, independently 
useless halves of the information which hackers are no 
longer able to evaluate. The implicit encryption also 
results in a saving on bandwidth or an increase in 
throughput . 



The example involves 2048 bits/packet /network (0 
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network and E network), as shown in table 1. This is a 
long way over the critical length per 0 packet and per 
E packet. Today's computers cannot calculate this 
length for the packets - within a useful 
5 period - through combination ("trying out" all options, 
by means of a computer program. ) 

Addresses, message identification (message ID) and the 
packet numbering, which are likewise part of a packet, 
10 are not changed by this method. 

An exemplary embodiment will be used to explain the 
invention with reference to a figure (figure 1). 
Figure 1 shows an embodiment of the inventive dual 
15 network, with a sender and with a receiver, and also 
with the path taken in the 0 network (dashed lines) by 
an 0 packet (dashed arrows) and with the path taken in 
the E network (solid lines) by an E packet (solid 
arrows) . 

20 

A sender 1 sends a message to a receiver 8. The message 
comprises 0 packets 4u and E packets 4g. 

An 0 packet 4u in the 0 network 5u takes the following 
25 path: 

0 port 2u on the sender 1, 

0 provider 3u for the sender 1, 

0 network 5u, 

0 provider 6u for the receiver 8, 
30 0 port 7u on the receiver 8. 

An E packet 4g in the E network 5g takes the following 
path : 

E port 2g on the sender 1, 
35 E provider 3g for the sender 1, 
E network 5g, 

E provider 6g for the receiver 8, 
E port 7g on the receiver 8. 
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When the 0 packets 4u and the E packets 4g have been 
preprocessed, the data are transmitted from the sender 
to the receiver. The 0 packets via the 0 network 5u, 
5 and the E packets via the E network 5g. These are two, 
clearly separate networks (dual network) , without a 
common node. The networks are produced through quasi- 
duplication of today's networks, which we are calling 0 
network and E network (0 = odd, E = even) . Duplication 

10 is to be understood to mean duplication of the number 
of nodes - in today's network. This is merely quasi- 
duplication, because the number of 0 nodes and the 
number of E nodes do not need to be identical. (The 
number of routers or gateways in the 0 network and in 

15 the E network do not have to be identical.) The nodes 
in the two networks are at different locations. 

The available spectrum (bandwidth) is used dynamically. 
This dynamic allocation of the channels, the distance 

2 0 between the nodes in the two networks and the dynamic 

routing produce the physical (geographical) and 
spectral separation of the O packets and the E packets 
during transmission. 

25 Each terminal (PC, server) has two identities: 0 
identity and E identity. One connects the terminal to 
the 0 network and the other connects it to the E 
network. The O packets look for their path in the 0 
network, and the E packets look for their path in the E 

3 0 network. This is done without any indication that they 

belong together and that they will arrive at the same 
terminal . 

Devices which are responsible for forwarding the 
3 5 packets in the respective network (routers and 
gateways) are respectively connected just to one 
network (0 network or E network) and perform their 
tasks as though there were just one network. This is 
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normal practice today - before the introduction of the 
dual network. 

After the transmission, the receiver reassembles the 0 
5 packets and the E packets. 

A transmission usually comprises more than just one 
packet. One component of the packets is an 
identification of the transmission (message ID) . In the 

10 dual network there is one for the O network and one for 
the E network. At the end of the transmission - as the 
last 0 packet - the sender sends the E message 
identification (E message ID) for the transmission in 
the E network (or vice versa) to the receiver. This 

15 allows the (authorized) receiver to reassemble the 0 
packets and the E packets. 

In theory, the dual network can be generalized as an N 
network (N = 1, 2 , 3 , . . . ) . 

20 

The dual network proposed here is suitable for any 
transmission medium. It is undoubtedly simpler to 
connect the terminals to the two networks for the 
wireless communication. 

25 

Conventional certification, signature and cryptography 
can be used in combination with the dual network. 



